LDAP question

enterume

Hi,

I am new to LDAP thingy. And I come across the API in PHP connect to LDAP server. Need to get some advice from you guys about few things.

My goal is to export the user from Microsoft Active Directory to MySQL, based on PHP. (or other method, please recommend. )

what data i can return if I do the ldap_search and ldap_list? Can I list out all the user store in Active Directory, based on their group or some others type set?
Can I get the user password, based on ldap_ function?
is the password in Active Directory, is same type with MySQL 'passowrd' field?
[/list=1]

Thanks in advance.

LordShryku

LDAP is really funky. Took me quite a while to get it all going stable with my company. You should first know your Base DN, include that in the search, then do a search on yourself.

No saying this will work for you, but here is what I did...

$ldapConnect = ldap_connect("active_directory_server");
$ldapBin = ldap_bind($ldapConnect, "username", "password");
$ldapSearch = ldap_search($ldapConnect,"baseDN","(searchFor=KownField)");
ldap_set_option($ldapConnect, LDAP_OPT_PROTOCOL_VERSION, 3);
ldap_set_option($ldapConnect, LDAP_OPT_REFERRALS, 0);
$ldapInfo = ldap_get_entries($ldapConnect, $ldapSearch);
// this will create an array for you
// to find out what you can access

print_r($ldapInfo[0]);

HTH

enterume

Hi HTH,

Thanks for your prompt reply.

Ok, can I perform LIST, which actually list out all the members information from AD, including username and password?

Thanks

LordShryku

!) HTH = Hope This Helps

2) You're not going to be able to pull their passwords, unless for some reason, they decide to store them in LDAP. And only then if your access permits. And the code I gave you will list everything you can pull from AD.

enterume

Hi... :rolleyes:

Ok, if let say I wish to replace the AD with MySQL? So I need to move pull everything from AD and migrate it to MySQL, possible to do this?

Thanks
Louis

LordShryku

Yes, it is. You'll just need to do some more coding to what I already gave you...

enterume

Originally posted by LordShryku
Yes, it is. You'll just need to do some more coding to what I already gave you...

is the MySQL password format same as Microsoft AD?

best_of_el

I'm newbie in LDAP. For study it, I've install openldap on windowsNT from this URL: http://www.ilex.fr/openldap/install-openldap-windows.exe
And then, i install phpldapadmin from this site: http://phpldapadmin.sourceforge.net

What i want ask is about base dn, login dn and password. What values I must enter for localhost server?

base DN = ?
login_dn = ?
password = this var, i know what to enter.. 😃

I try set like this:
base DN = 'dc=localhost, dc=com';
login DN = 'cn=el, dc=localhost, dc=com';

But i can't login. FYI, connection was success.